Question

A financial services company runs a shared Amazon Bedrock platform used by three business units (Retail, Wealth, and Compliance). The platform team wants each business unit's developers to be able to invoke only the foundation models approved for their unit, without creating and maintaining a separate IAM policy per user. Developers are already assigned an IAM principal tag named 'BusinessUnit'. Which approach best enforces per-unit model access with the least ongoing administrative overhead?

Accepted Answer

Write a single IAM policy that grants bedrock:InvokeModel and uses a condition comparing the aws:PrincipalTag/BusinessUnit value against a tag on the model resource via ABAC, attaching the policy to all developer roles.

Answer

Create one IAM policy per business unit that lists the exact model ARNs allowed for that unit, and attach the appropriate policy to each developer as they join.

Answer

Apply a Bedrock guardrail per business unit configured with denied topics to block responses from unapproved models.

Answer

Enable an SCP at the organization root that denies bedrock:InvokeModel unless the request originates from a specific VPC endpoint per business unit.